Chapter 6: Physical Security

While cyber defense frequently emphasizes logical firewalls and cryptographic protocols, logical security is rendered completely irrelevant if an adversary or unauthorized personnel can physically access server chassis, fiber optic cables, or network distribution frames. Physical security in the GIFT IFSC mandates a defense-in-depth zoning architecture that treats the physical data center, dealing rooms, and trading floors as high-security enclaves.

Concentric Perimeter Zoning Model

Physical security architecture is organized in concentric rings of increasing security controls, ensuring that a breach of an outer barrier does not compromise critical core assets:

+----------------------------------------------------------------------------------------------------+
|                                 CONCENTRIC PHYSICAL SECURITY ZONES                                 |
+----------------------------------------------------------------------------------------------------+
|  [ ZONE 1: PROPERTY BOUNDARY ]                                                                     |
|    Vehicle barriers, anti-ram bollards, perimeter fencing, guard post, ANPR cameras.             |
|    |                                                                                               |
|    +---> [ ZONE 2: FACILITY PERIMETER ]                                                           |
|            Visitor reception, security turnstiles, metal detectors, x-ray baggage scanners.       |
|            |                                                                                       |
|            +---> [ ZONE 3: OPERATIONAL AREAS ]                                                     |
|                    General offices, dealing rooms, trading desks, restricted access badge readers. |
|                    |                                                                               |
|                    +---> [ ZONE 4: CRITICAL INFRASTRUCTURE ENCLAVES ]                             |
|                            Server rooms, primary NOC/SOC, telecom meet-me rooms, mantrap access.   |
|                            |                                                                       |
|                            +---> [ ZONE 5: CAGE & RACK LEVEL SECURITY ]                           |
|                                    Locked server cabinets, biometric dual-custody access.          |
+----------------------------------------------------------------------------------------------------+

Physical Access Controls & Biometric Surveillance

• Mantraps (Interlocking Security Portals): Deployed at the ingress of Zone 4 (Data Centers). A mantrap consists of two interlocked doors where the second door cannot physically unlock until the first door has completely closed and the entrant's identity is verified via two-factor biometric authentication. Mantraps physically eliminate Tailgating and Piggybacking.
• Anti-Passback Enforcement: Prevents a credential holder from passing their physical access card back to a second person. The access control system verifies that an identity cannot badge into an internal zone unless the system records a prior successful badge-in at the exterior boundary.
• CCTV Surveillance Standards:
  • High-definition, low-light IP cameras covering 100% of perimeter boundaries, ingress/egress points, server aisles, and electrical distribution panels.
  • Zero blind spots across active server racks and telecommunication patch frames.
  • Video Retention Requirement: Video archives must be retained in tamper-proof, redundant storage for a minimum statutory period of 90 to 180 days (subject to regulatory audit requirements).

Environmental Monitoring & HVAC Specifications

Data centers housing core banking and trading matching infrastructure must maintain strict climatic parameters conforming to ASHRAE (American Society of Heating, Refrigerating and Air-Conditioning Engineers) guidelines:

Continuous, uninterrupted power supply and rapid, non-destructive fire suppression represent critical operational dependencies for GIFT IFSC market infrastructure institutions (MIIs) and global financial intermediaries.

Dual-Grid Power Architecture & Uninterruptible Power Supplies (UPS)

Financial computing facilities must eliminate all single points of failure (SPOF) within their electrical distribution chain:

1. Diverse Utility Substation Ingress: Ingress electrical feeds must originate from two geographically separate utility substations, routed through independent physical conduits entering the building at disparate corners.
2. Uninterruptible Power Supply (UPS) Systems:
   • Configured in a 2N (full redundant pair) or N+1 modular architecture.
   • UPS battery strings (utilizing Valve-Regulated Lead-Acid [VRLA] or advanced Lithium-Iron-Phosphate [LiFePO4] chemistries) must deliver at least 15 to 30 minutes of full-load autonomy to bridge the gap until secondary generation stabilizes.
   • Static transfer switches (STS) facilitate millisecond-level power phase transfers without causing server power supply drops.
3. Backup Diesel Generators (DG):
   • Automatic Transfer Switches (ATS) detect utility grid loss and crank on-site diesel generators within 10 to 15 seconds.
   • On-site fuel storage must sustain full continuous data center load for a minimum of 48 to 72 hours under emergency conditions, accompanied by binding priority fuel replenishment contracts with multiple local oil distribution vendors.
   • Monthly under-load generator testing under supervised maintenance windows.

+----------------------------------------------------------------------------------------------------+
|                                    2N REDUNDANT POWER DISTRIBUTION                                 |
+----------------------------------------------------------------------------------------------------+
|  [ Utility Grid Feed A ] ---> [ UPS System A (100% Load) ] ---> [ PDU A ] ---> [ Dual-Cord Server ] |
|                                                                                      |             |
|  [ Utility Grid Feed B ] ---> [ UPS System B (100% Load) ] ---> [ PDU B ] -----------+             |
|                                                                                                    |
|  [ Emergency Gen Feed ] ----( ATS Emergency Switchover )-------------------------------------------+
+----------------------------------------------------------------------------------------------------+

Advanced Fire Detection & Clean-Agent Suppression

Traditional water sprinkler systems are completely catastrophic in high-voltage electronic server environments. Data centers require specialized gaseous suppression:

• Very Early Smoke Detection Apparatus (VESDA): Continuous air-aspirating smoke detection systems that actively draw ambient air through micro-bore sampling pipes. VESDA systems detect microscopic sub-micron particles released during the initial pre-combustion overheating of wire insulation, alerting engineers hours before flame or heat generation occurs.
• Clean-Agent Gaseous Suppression Systems:
  • Utilizes eco-safe, non-conductive, residue-free chemical agents such as Novec 1230 (Fluoroketone) or FM-200 (HFC-227ea), or inert gas mixtures (Inergen / IG-541).
  • Extinguishment Mechanism: Rapidly absorbs thermal energy or reduces oxygen concentration to levels where combustion cannot sustain (12–14%), while remaining completely safe for human occupancy during brief egress windows.
  • Discharged via automated cross-zoned detection interlocks within 10 seconds of verified two-sensor confirmation, extinguishing fires without leaving any chemical residue or damaging delicate silicon hardware.
• Emergency Power Off (EPO): Guarded, glass-break physical EPO buttons located at control exits to completely isolate electrical power during uncontained disasters, integrated with safety interlocks preventing accidental actuation.

The physical lifecycle of data storage assets—encompassing hard disk drives (HDDs), solid-state drives (SSDs), magnetic backup tapes, optical media, and embedded NVMe drives—represents a critical vulnerability for regulatory non-compliance and catastrophic data leakage.

Chain of Custody for Data Storage Media

From the instant a storage drive is provisioned until its ultimate physical destruction, financial entities in the GIFT IFSC must maintain an unbroken, auditable chain of custody:

1. Asset Tagging & Logging: Every storage drive is assigned a tamper-evident barcode or RFID tag linked to the enterprise Configuration Management Database (CMDB).
2. Secure Media In-Transit Controls: Backup tapes and removable drives transferred off-site to secondary disaster recovery facilities must be secured in locked, water-resistant, shock-absorbing, fire-rated transit containers transported by bonded security logistics couriers.
3. Mandatory Storage Encryption: All physical media departing the primary facility perimeter must be protected with hardware-level AES-256 full disk encryption (FDE). Transporting unencrypted financial transaction archives or customer PII violates core regulatory guidelines.

Media Sanitization Standards: NIST SP 800-88 Rev. 1

IFSCA regulated entities must govern media retirement according to the tripartite sanitization hierarchy defined in NIST Special Publication 800-88 Revision 1 (Guidelines for Media Sanitization):

+----------------------------------------------------------------------------------------------------+
|                                  NIST SP 800-88 SANITIZATION HIERARCHY                              |
+----------------------------------------------------------------------------------------------------+
|  1. CLEAR   : Logical sanitization overwriting data with pseudorandom patterns (Re-use internally)|
|  2. PURGE   : Cryptographic erase or degaussing rendering recovery impossible (Re-use externally) |
|  3. DESTROY : Physical shredding, disintegration, or incineration (Permanent total destruction)    |
+----------------------------------------------------------------------------------------------------+

Clean Desk and Clean Screen Policy (CDCS)

Within the physical offices, dealing rooms, and trading floors of GIFT IFSC entities, human physical vulnerability is managed through strict workplace policies:

• Clean Screen Policy: Workstations must be configured via group policy objects (GPO) to lock automatically after a maximum of 3 to 5 minutes of inactivity, requiring full password/MFA re-authentication.
• Clean Desk Policy: Physical documents containing client portfolios, banking account details, or architectural diagrams must be locked in fireproof safes when personnel depart their desks. Whiteboards in meeting rooms must be wiped immediately post-conference.
• Prohibition of Recording Devices on Trading Floors: Cell phones, portable cameras, and unauthorized USB storage devices are strictly prohibited within active dealing rooms and market operations centers to prevent physical data exfiltration.